General

  • Target
    58df0f27b7046c838858cfe2ee5f971c8f405a94ae32a93a63bc9ad50f099e3b
  • Size 12.1MB
  • Sample260528-sw2krset7v
  • SHA256 58df0f27b7046c838858cfe2ee5f971c8f405a94ae32a93a63bc9ad50f099e3b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://pam.corp.local/SecretServer

Targets

    • Target
      Anthropic-Cybersecurity-Skills-main/skills/acquiring-disk-image-with-dd-and-dcfldd/scripts/agent.py
    • Size 6KB
    • SHA256 885613c1aa72f549911e88e2226854b0a3b3d765e0df849477c26ed63afb3d85
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Anthropic-Cybersecurity-Skills-main/skills/analyzing-active-directory-acl-abuse/scripts/agent.py
    • Size 9KB
    • SHA256 8b92e319323b26479a80a0142a27d2689abcd7aac9f4370e7049e79640e457a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Anthropic-Cybersecurity-Skills-main/skills/analyzing-android-malware-with-apktool/scripts/agent.py
    • Size 8KB
    • SHA256 af647ad312a85455ea15a2a8d09f8fcab6e2f7becc8490979ebe1f0542d2a3f4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Anthropic-Cybersecurity-Skills-main/skills/analyzing-api-gateway-access-logs/scripts/agent.py
    • Size 6KB
    • SHA256 7ef873c2c6245017817b9eb5cb64f73f5e9d103a556f9d47cea7577d2c6937a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py
    • Size 8KB
    • SHA256 d714a27e4acb6bdaeacf4f5eaa4a905bba87f6f9e9d24813785821579d2fe4b9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      Anthropic-Cybersecurity-Skills-main/skills/analyzing-azure-activity-logs-for-threats/scripts/agent.py
    • Size 6KB
    • SHA256 d0aa5d41cb9b8ebb5f312b8271238a235aafb4c0e24e76b72791f55e3521fec6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Anthropic-Cybersecurity-Skills-main/skills/analyzing-bootkit-and-rootkit-samples/scripts/agent.py
    • Size 6KB
    • SHA256 937fe71d3006b59dd4afb41e67b7b511dae9a54532ab48a5a967b802673de397
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Anthropic-Cybersecurity-Skills-main/skills/analyzing-browser-forensics-with-hindsight/scripts/agent.py
    • Size 9KB
    • SHA256 bda036d07694cd854ae19c2ac43bb1988b8ea0413912bd037a48d5fbe6aaa93d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasion
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

discoveryexecution
Score
6/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

discoveryexecution
Score
3/10

behavioral30

discoveryexecution
Score
3/10

behavioral31

discoveryexecution
Score
3/10

behavioral32

discoveryexecution
Score
3/10